KORN19
6 CVEs tracked since 2009. Since Nov 2009, none of them reached CISA KEV.
KORN19 CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2009-11 | 1 | 0 |
| 2009-12 | 5 | 0 |
Products
The products that kept showing up in KORN19's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 6 most recently published vulnerabilities affecting KORN19.
- CVE-2009-4250Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via (1) the result parameter...4.3
- CVE-2009-4172Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web scrip...2.6
- CVE-2009-4173Cross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the authentication of administrators for requests that creat...6.8
- CVE-2009-4175CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an invalid date value in the from_date_day parameter to search.php, which reveals the...5.0
- CVE-2009-4174The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc is disabled, allows remote authenticated users with Journalist or Editor access to bypass administr...6.0
- CVE-2009-4113Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authenticated users with application administrative privileges to i...6.5
The record
- Peak rank
- #15 in Dec 2009
- Busiest month shown
- Dec 2009, 5 CVEs
- Months with a KEV entry
- 0 since Nov 2009
- Monthly snapshots
- 2 since 2009